Privacy Policy

The contact form prepares an email locally in your browser; it does not submit your form entries to a website database. You review and send the email using your own email service. When you email NordAurora, the information you provide may include your name, email address, phone number, country of residence, treatment interest, preferred destination and information you voluntarily include in your enquiry.

Please do not include unnecessary medical records, identification documents or detailed sensitive health information in your initial website enquiry.

Information may be used to:

• respond to enquiries;
• understand what assistance you are seeking;
• communicate about NordAurora services;
• help coordinate requested next steps; and
• maintain necessary administrative records.

We do not use your information for purposes unrelated to the enquiry or service you have requested.

Healthcare-related enquiries can involve sensitive personal information. The initial website enquiry form is not intended for sending:

• medical records;
• passports or identification documents;
• detailed medical histories; or
• other unnecessary sensitive information.

If additional information becomes necessary later in the patient journey, NordAurora will explain how it should be provided.

Personal information may need to be shared with relevant healthcare providers or service providers when necessary to provide a service requested by the individual. Information is not shared simply for unrelated purposes. Any sharing should be considered in the context of the requested service and applicable privacy requirements.

NordAurora's services may involve healthcare providers located in countries outside Norway and the user's country of residence. Where personal information needs to be shared internationally in connection with a service requested by the individual, applicable privacy and data-protection requirements must be considered.

Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected and where necessary to meet applicable legal or administrative obligations.

Applicable data-protection law may provide individuals with rights relating to their personal information, including:

• access;
• correction;
• deletion;
• restriction of processing;
• objection; and
• data portability.

The availability and scope of these rights depend on the applicable law and circumstances. You may also complain to the Norwegian Data Protection Authority (Datatilsynet).

The website uses technical functionality for navigation and the Concierge. No analytics or advertising tools are included in the current website code. Fonts are loaded from Google Fonts, which receives technical request information when the page loads.

The website is hosted on Vercel. When you use the AI Concierge, your messages and recent conversation context are sent to OpenAI to generate a response. Please use it only for general questions and do not provide sensitive information. The current website does not create a persistent chat history of its own. These providers may process technical data according to their own policies.

NordAurora takes reasonable measures to protect personal information. No method of transmission or storage can be guaranteed to be completely secure, and information should be shared thoughtfully and only as necessary.

This Privacy Policy may be updated as NordAurora's website, services and operating processes develop.

Last updated: 8 October 2026